A858DE45F56D9BC9 archive

201210050343 10zf5g

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 30

Metadata

Post ID
10zf5g
Title
201210050343 → 2012-10-05 03:43 on A858's clock
Posted (UTC)
2012-10-05 07:43:00
Timezone
UTC−4 · title 03:43 against posted 07:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210050343) = aadd8aabd15110b7277f428c9507936a (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(30).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
215 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210050343 (name+title). Key = MD5(password) = aadd8aabd15110b7277f428c9507936a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c845c9c7-facb-3c48-b5cd-ce9c675e79e4
  2 9f605f0c-2bff-5188-9caf-8e3bac1e4c41
  3 855ac4b4-4ba7-62fa-b90d-ed06f1e0c018
  4 d56bdf24-0458-8b87-8fcf-2ce37cb59c07
  5 0959e728-8198-6521-86b2-627482e7f38a
  6 8ccbc7cb-6e19-6842-8c23-d94fca135d86
  7 c752d3e0-ffe0-3e9d-8870-f4a086acc4fe
  8 a86f91e0-9bb1-419a-8c87-bbd4c5794cef
  9 89a171fb-f24f-6caf-b47f-5072bf1485c7
 10 393ea55e-3f2c-3b25-9094-97421f2c80a3
 11 d72be264-f534-36b0-a335-afbfc5d8f097
 12 290ce370-182d-7a71-92fc-dbc9cf2bc93f
 13 79b05230-f71d-2d9a-bb95-7cb45a055421
 14 d12a19ad-8aa4-0ced-8677-7ed6ccffb87d
 15 11f804f1-8fa0-8c3b-b279-db8a8ec839ce
 16 b48ece33-91de-6f94-b25b-24402ad0e4e5
 17 d3cbbeba-f064-4d6b-9cca-6b24d83f2e83
 18 2a5f7874-494c-5ce1-b267-73e808a98ecf
 19 1a774f9b-cc4c-4641-8047-1a434e2f2d90
 20 9afd2b01-0b57-8ea6-9d06-02cb1893262a
 21 6d97213a-95ca-79f2-8efa-3c5f3ebccd07
 22 eddbc27f-2ed6-1089-a3a5-8d7933806861
 23 9cf00709-42df-0082-a55d-79d3420370e2
 24 d784c210-784f-4c1b-b04a-8d4f34ca60ce
 25 fc1fca8a-f1fc-5022-9b90-0e32df96ca8f
 26 23839414-e8b8-71d6-a9e9-f07ac47b30ba
 27 c4c0aa63-a2fd-6864-836f-d32ad23f551f
 28 628ecbf4-e363-2a34-abc1-e3780d2055ca
 29 35f3444b-147b-7579-847f-20122951633f
 30 59ee4a97-70ea-290f-8351-76f8491eb848
 31 293959ad-35d4-29de-95f3-631eb206c6c8
 32 e972e0ed-dfcb-3925-9b7b-97d2b4140f0c
 33 b69447b1-0145-34ca-b116-127619176a1f
 34 b11fadcb-bebf-69c5-849c-1323c93ea9d7
 35 48eb7fe7-d67a-18cb-b721-32eb3340bf6f
 36 1f279759-3f42-0a52-bcda-efe2be34228a
 37 3dfbafac-4b6a-7668-b7e8-4b98ab25cbf3
 38 d4af09aa-0ec7-75c6-9b28-070084ddbd77
 39 64735b60-172a-4851-a4bb-f7ab70b8d464

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 356866346337208645487104576272233610774. Exactly this sequence comes out of new Random(30).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 215 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results